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Since the rights granted by a U.S. patent extend only throughout the territory of the United States and have no 
effect in a foreign country, an inventor who wishes patent protection in another country must apply for a patent in 
a specific country or in regional patent offices. Applicants may wish to consider the filing of an international 
application under the Patent Cooperation Treaty (PCT). An international (PCT) application generally has the same 
effect as a regular national patent application in each PCT -member country. The PCT process simplifies the 
filing of patent applications on the same invention in member countries, but does not result in a grant of "an 
international patent" -and does not eliminate the need , of applicants to file additional documents and fees in 
countries where patent protection is desired. 

Almost every country has its own patent law, and a person desiring a patent in a particular country must make an 
application for patent in that country in accordance with its particular laws. Since the laws of many countries differ 
in various respects from the patent law of the United States, applicants are advised to seek guidance from 
specific foreign countries to ensure that patent rights are not lost prematurely. 

Applicants also are advised that in the case of inventions made in the United States, the Director of the USPTO 
must issue a license before applicants can apply for a patent in a foreign country. The filing of a U.S. patent 
application serves as a request for a foreign filing license. The application's filing receipt contains further 
information and guidance as to the status of applicant's license for foreign filing. 

Applicants may wish to consult the USPTO booklet, "General Information Concerning Patents" (specifically, the 
section entitled "Treaties and Foreign Patents") for more information on timeframes and deadlines for filing foreign 
patent applications. The guide is available either by contacting the USPTO Contact Center at 800-786-9199, or it 
can be viewed on the USPTO website at http://www.uspto.gov/web/offices/pac/doc/general/index.html. 

For information on preventing theft of your intellectual property (patents, trademarks and copyrights), you may 
wish to consult the U.S. Government website, http://www.stopfakes.gov. Part of a Department of Commerce 
initiative this website includes self-help "toolkits" giving innovators guidance on how to protect intellectual 
property in specific countries such as China, Korea and Mexico. For questions regarding patent enforcement 
issues applicants may call the U.S. Government hotline at 1 -866-999-HALT (1 -866-999-41 58). 
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matter as imposed by any Government contract or the provisions of existing laws relating to espionage and the 
national security or the export of technical data. Licensees should apprise themselves of current regulations 
especially with respect to certain countries, of other agencies, particularly the Office of Defense Trade Controls, 
Department of State (with respect to Arms, Munitions and Implements of War (22 CFR 121-128)); the Office of 
Export Administration, Department of Commerce (15 CFR 370.10 (j)); the Office of Foreign Assets Control, 
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5.12, if a license is desired before the expiration of 6 months from the filing date of the application. If 6 months 
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AMENDMENTS TO THE SPECIFICATION: 

Please add the following centered title at page 1 , line 1 : 

Method and System for Checking Digital Signatures and Card with Microcircuit for using 
the Method 

Insert the following centered heading at page 1 , after the title: 

BACKGROUND 

Please add the following centered heading at page 3, line 4: 

SUMMARY 

Please add the following centered heading at page 5, line 29: 

BRIEF DESCRIPTION OF THE DRAWINGS 

Please add the following centered heading at page 6, line 5: 

DETAILED DESCRIPTION 

Please delete the centered heading beginning at page 16, line 3, which starts with 
"METHOD AND SYSTEM..." 

Please replace the paragraph beginning at page 5, line 27 with the following amended 
paragraph: 

According to yet another particular feature of the invention, this process comprises a 
phase of inserting a root public key in the certificates table, this insertion phase being done by 
write processing controlled by a MAC calculated using a specific key in the microcircuit and 
only known to a - transmitting an entity m having issued the microcircuit. 
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Please replace the abstract at page 16 with the following amended abstract: 
To check a digital signature, using a microcircuit card (S3), the microcircuit being 
designed to receive and to process requests to check digital signatures, the process comprises 
storing in a memory in the microcircuit (§3) a certificates table (5, 5') containing digest forms of 
authorized public keys, and a phase (3) of checking a digital signature consisting of: receiving 
(34-) by the microcircuit the digital signature (Sig(Aip,M) to be checked and a public key (Alp) 
corresponding to a private key that was used to generate the digital signature to be checked; 
calculating (33) a digest form (Hash(Alp)) of the received public key, searching (35) for the 
calculated digest form of the public key in the certificates table (5, 5') , and decrypting (35) the 
digital signature using the received public key if the calculated digest form of the public key is 
located in the certificates table. 
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AMENDMENTS TO THE CLAIMS: 

This listing of claims replaces all prior versions and listings of claims in the application: 

T .TSTTNGOF CLAIMS: 

1. (Currently Amended) Method -A method for checking a digital signature, involving a 
microcircuit (*P < ) that mn ho connected connectable t o a data processing system-(54), the 
microcircuit being designed to receive requests to check digital signatures from the data 
processing system, and to process these requests, a digital signature being generated using a 
private key only known to a signatory entity and associated with a public key, 

characterise* m ^ inrlnHnr said method comprising a step of storing a certificates 
table (^-^containing a digest form of at least one public key in a memory in the microcircuit 
(§5), and a phase <2)-of checking a digital signature comprising steps consisting of: 

[[-]] receiving (24>-by the microcircuit the-adigital signature (Sig(Ai p T M)-to be checked 
and a public key (A4 p )-m a pair of keys comprising a private key that was used to generate the 
digital signature to be checked, 

[[-]] calculating (33>a digest form (Hash(Al p #-of the received public key, and searching 
(23) for the calculated digest form of the public key in the certificates tabl e (5, 5') , and 

[[-]] decrypting (25)-the digital signature using the received public key if the calculated 
digest form of the public key is located in the certificates table. 

2. (Currently Amended) Method- The method according to claim 1, 

skaraetefieed in thnt it comprises further comprising a phase fi^-of inserting a public key 
(Bpfinto the certificates table (5, 5') , comprising steps consisting of: 

[[-]] receiving (W)-by the microcircuit (S3)-a certificate (<R,B>) of the public key (B p )-to 
be inserted in the certificates table, and a public key ^-fiom a certification entity that 
generated the certificate, the certificate comprising the public key to be added into the 
certificates table and a digital signature of the certification entity, generated using a private key 
belonging to a pair of keys including the public key of the certification entity, 

[[-]] calculating (44^-by the microcircuit a digest form (Hash<JVB-of the public key ^) 
received from the certification entity, and searching (13}- for the calculated digest form of the 
public key in the certificates table, 
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[[-]] decrypting (±4)-the digital signature using the public key received from the 
certification entity if the calculated digest form of the public key is located in the table, 

[[-]] extracting f}-7)-the public key {B^to be inserted from the certificate if the decrypted 
digital signature is correct, 

[[-]] calculating £4£}-a digest (Hash(B p )>of the public key (B p )-extracted from the 
certificate, and inserting (4£)-the calculated digest in the certificates table. 

3. (Currently Amended) Me&ed The method according to claim 2, 

characterized in that wherein the phase (4>of inserting a public key (B^-in the certificates 
table (5, 5 f ) comprises the ins e rtion a step of inserting in the certificates table of a pointer (8)-to 
the digest of the public key <Rp)-of the certification entity that issued the certificate (<R,B>) of 
the public key to be inserted, so as to define a certification tree in combination with the inserted 
digest of the public key. 

4. (Currently Amended) Me&ed The method according to claim 3, 
rhnrnr.tori7.Qd in that it includ e s further comprising a phase @>of deleting a digest 

(Hash(Bp)>of a public key (B p )-from the certificates table (5, 5 f ) , consisting comprising steps of 
deleting from the certificates table the digest of a public key to be removed from the certificat e s 
table, and deleting from the certificates table all digests of public keys associated with a pointer 
(Syndicating the public key (B^)-to be removed, from the certificat e s tabl e. 

5. (Currently Amended) Metho dThe method according to one of claims claim 24e-4, 
characterized in that wherein each public key digest entered into the certificates table 

Styis associated with a validity end date-(3), and in that t he phase (frof inserting a public key 
(B p )-into the certificates table also comprises further comprising steps consisting of reading ina 
received certificate a validity end date of the public key to be inserted in tho received certificat e 
(<R,B>), and entering the validity end date of the public key (B^to be inserted into the 
certificates table, together with the digest of the public key to be inserted, if it is earlier than the 
validity end date of the public key (R^>of the certification entity read in the certificates table. 



6. (Currently Amended) Methe dThe method according to one of claims claim 24e-§», 
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rhnmrtnrizod in that wherein each digest of a public key entered in the certificates table 
(5 ? 5') j z associated with a usage counter (44>that is incremented every time that a digital 
signature is checked using the public key, and in thnt it includes said method comprising deletion 
of a public key digest from the certificates table when the usage counter is zero and the number 
of empty locations in the certificates table is less than a predetermined threshold. 

7. (Currently Amended) Metbo dThe method according to one of claims claim 24e-£, 
rhnmct o rizod in that w herein each public key digest entered into the certificates table (§7 

£}-is associated with a usage counter (44-)4hat is. incremented every time that a digital signature 
is checked using the public key, ei ^and with a last usage date (43)-that is updated every time that 
the associated usage counter is incremented, and in that when the number of empty locations in 
the certificates tablo ii W tVmr. o prnrWmiinnH thrnnhnld it nlnn includes said method further 
comprising a step to select a digest of a public key to be deleted as a function of the 
corresponding associated values of the usage counter and the last usage date when the number of 
empty locations in the certificates table is less than a predetermined threshold . 

8. (Currently Amended) Methed The method according to ono of claims claim I4e-^, 
rhnrnntorizod in that wherein the microcircuit (£3>-uses a predefined hashing function to 

calculate the digest forms of the public keys. 

9. (Currently Amended) Metked The method according to ono of claims claim I4e-S, 
nWnrtnri^H in that it compris e s further comprising a phase of inserting a root public key 

(f^)-in the certificates table (5, 5') , this insertion phase being done by awrite processing 
controlled by a MAC calculated using a specific key in the microcircuit (#5)-and only known to a 
transmittinp-an entity m -having issued the microcircuit. 

10. (Currently Amended) Methe4 The method according to ono of claims claim l4e-9, 

r hnrnr.tnrizod in that wherein the digest of a public key memorized in the certificates table 
(5 ? 5') j c obtained by calculating a digest of the public key associated with other information such 
as the validity end date of the public key, identity information and serial numbers, this 
information being transmitted to the microcircuit (S£)-every time that the signature is checked 
using the public key. 
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1 1 . (Currently Amended) Method The method according to one of claims claim 1 to 10 , 
rhnmctcrizod in that wherein the digest of a public key memorized in the certificates table 

(5 y 5') j z obtained by calculating a digest of the certificate received by the microcircuit when 
the public key is inserted in the certificates table, this certificate being transmitted to the 
microcircuit every time that the signature is checked using the public key. 

12. (Currently Amended) Meihed The method according to one of claims claim I4e-H-, 
r.hnractorized in that w herein the certificates table (5, 5') is stored in a secure memory 

area in the microcircuit-(S3). 

13. (Currently Amended) Card provided with a A_microcircuit-(5£), characterized in that 
it uccc the method -»rmrHinn in nnn nf Hm'mr . 1 tn 1 ? designed to receive reques t s to check 
digital signatures from a data processing system, and to process these re quests, a digital signature 
being generated using a private key only known to a signatory entity and asso ciated with a public 
key, said microcircuit comprising: 

memory means for storing a certificates table containing a digest form of at least one 

public key, 

means for receiving a digital signature to be checked and a public key in a pair of keys 
comprising a private key that was used to generate the digital signature to be checked, 

means for calculating a digest form of the received public key, and for searching for the 
calculated digest form of the public key in the certificates table, and 

means for decrypting the digital signature using the received pu blic key if the calculated 
digest form of the public key is located in the certificates table . 

14. (Canceled) 

15. (New) The microcircuit according to claim 13, 
further comprising: 

means for receiving a certificate of the public key to be inserted in the certificates table, 
and a public key from a certification entity that generated the certificate, the certificate 
comprising the public key to be added into the certificates table and a digital signature of the 
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certification entity, generated using a private key belonging to a pair of keys including the public 
key of the certification entity, 

means for calculating a digest form of the public key received from the certification 
entity, and for searching for the calculated digest form of the public key in the certificates table, 

means for decrypting the digital signature using the public key received from the 
certification entity if the calculated digest form of the public key is located in the table, 

means for extracting the public key to be inserted from the certificate if the decrypted 
digital signature is correct, 

means for calculating a digest of the public key extracted from the certificate, and for 
inserting the calculated digest in the certificates table. 

16. (New) The microcircuit according to claim 15, 

further comprising means for inserting in the certificates table a pointer to the digest of 
the public key of the certification entity that, issued the certificate of the public key to be inserted, 
so as to define a certification tree in combination with the inserted digest of the public key. 

1 7. (New) The microcircuit according to claim 16, 

further comprising means for deleting from the certificates table a digest of a public key 
to be removed, and means for deleting from the certificates table all digests of public keys 
associated with a pointer indicating the public key to be removed. 

18. (New) The microcircuit according to claim 15, 

further comprising: means for reading in a received certificate a validity end date of a 
public key to be inserted, and means for entering the validity end date of the public key to be 
inserted into the certificates table, together with the digest of the public key to be inserted, if the 
validity end date is earlier than the validity end date of the public key of the certification entity 
read in the certificates table. 

19. (New) The microcircuit according to claim 15, 

further comprising means for incrementing a usage counter associated with each public 
key digest entered into the certificates table, every time that a digital signature is checked using 
the public key, and means for deleting a public key digest from the certificates table when the 
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associated usage counter is zero and the number of empty locations in the certificates table is less 
than a predetermined threshold. 

20. (New)The microcircuit according to claim 19, 

further comprising means for updating a last usage date associated with each public key 
digest entered into the certificates table, every time that a digital signature is checked using the 
public key, means for deleting a public key digest from the certificates table when the number of 
empty locations in the certificates table is less than a predetermined threshold, and means for 
selecting a digest of a public key to be deleted as a function of the corresponding associated 
values of the usage counter and the last usage date. 

21. (New)The microcircuit according to claim 13, 

further comprising means for executing a predefined hashing function to calculate the 
digest forms of the public keys. 

22. (New)The method according to claim 13, 

further comprising means for inserting a root public key in the certificates table, using a 
write processing controlled by a MAC calculated using a specific key in the. microcircuit and 
only known to an entity having issued the microcircuit. 

23. (New)The method according to claim 13, 

wherein the means for calculating the digest of a public key memorized in the certificates 
table comprise means for calculating a digest of the public key associated with other information 
comprising the validity end date of the public key, identity information and serial numbers, this 
information being transmitted to the microcircuit every time that the signature is checked using 
the public key. 

24. (New)The method according to claim 13, 

wherein the means for calculating the digest of a public key memorized in the certificates 
table comprise means for calculating a digest of the certificate received by the microcircuit when 
the public key is inserted in the certificates table, this certificate being transmitted to the 
microcircuit every time that the signature is checked using the public key. 
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25. (New)The method according to claim 13, wherein the memory means for storing the 
certificates table is a secure memory area. 
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REMARKS 

The applicant presents claims 1-13 to 15-25 for examination. Claims 1 and 13 are 
independent. Claim 14 has been canceled. 

Entry hereof and early passage to issue are respectfully requested. 

Please apply any fees associated with this Preliminary Amendment or the accompanying 
application, which have not already been covered by check, to Deposit Account 06-1050. 

Respectfully submitted, 
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